Children’s privacy notice

iempower runs the iempower learning service at www.iempower.me and is responsible for the information described here. You can contact us about a child’s information by replying to any email we have sent you.

Only a parent or legal guardian aged 18 or over can create a child profile, from inside their own signed-in family account. We collect:

• From the parent: a first name or nickname; optionally a year of birth and school year; the subjects, topics, priorities and daily time chosen.
• From learning sessions the parent starts: which questions were shown, the answers given, whether they were right, and when.
• Worked out from those answers: levels, a mastery estimate per topic, the revision schedule, points earned, and short explanations of each change.

We do not collect a child’s surname, email address, phone number, photo, voice, location, contacts or school name, and there is no chat, messaging or free-form posting. A child’s profile cannot sign in.

Only to provide the learning service the parent asked for: choosing each day’s questions, adapting difficulty to how the child is doing, scheduling revision, and showing the parent their child’s progress. We do not use children’s information for advertising, marketing, selling, or any purpose unrelated to their learning, and no automated decision about a child has legal or similarly significant effects.

Only the parent who created the profile. Children never appear on leaderboards or in any other user’s view. Questions are marked by our own software; no child information is sent to artificial-intelligence services.

Like any online service we rely on providers that host and run it — cloud hosting, our database and our email provider — who process information only on our instructions and under contract. Your child’s nickname appears in emails we send to you (for example the daily reminder). We do not otherwise disclose children’s information unless the law requires it.

Before a profile is created, the parent — already signed in with an email address they have proven they control — reads this notice and gives explicit consent. We record when consent was given and which version of this notice it covered, and we email a confirmation to the parent’s address so that consent given without their knowledge can be withdrawn straight away. If this notice changes in a way that affects children’s information, we will ask again.

• See everything from the child’s progress page in the family account.
• Download a complete copy (a JSON file) from the Privacy tab.
• Correct the name, birth year, subjects and time at any time.
• Withdraw consent and delete from the Privacy tab: the profile, answers and progress are erased immediately and no more information is collected.
• Deleting the parent’s own account erases all of their children’s profiles too.

Depending on where you live (including under COPPA in the United States, the UK and EU GDPR, and the UAE Personal Data Protection Law), you may also have the right to complain to a data protection authority.

For as long as the profile is in use. A profile is erased immediately when the parent deletes it or their account, and automatically if it has not been used for 24 months. Erased information leaves our database at once; copies in our database backups are overwritten within 30 days. We keep only a record that consent was given and later withdrawn, without the child’s name.

Information is encrypted in transit and at rest, access is limited to the parent’s account and to staff who need it to run the service, and changes to child profiles are recorded in an audit log.

Your grown-up set up your learning space. We only keep your first name or nickname and how you are getting on with your questions, so we can pick the right ones for you each day. Only your grown-up can see it. We never show it to anyone else, and your grown-up can delete it whenever they like.